Staff Security Analyst

turing; United States; Remote; USD 198,000 - 242,000; Full time

Benefits offered by this job

Salary $220,000

Senior IC track

Job summary

Turing is seeking a senior individual-contributor security professional to act as the technical authority for detection, triage, investigation, and response to threats in a fast-paced environment.

You will own the most complex cases, strengthen detections, playbooks, and processes, and bridge security operations with engineering work to improve security outcomes.

This staff-level role offers high impact, mentorship to peers, and the opportunity to shape threat detection at scale in the US.

Qualifications

• 8+ years in security operations or incident response.
• Hands-on threats across cloud, endpoint, identity, and network telemetry.
• Strong skills in SIEM, log analysis, and detection tuning.
• Scripting or automation ability in Python or similar.

Responsibilities

• Lead triage and investigation of complex, high-severity security alerts and incidents.
• Tune and validate detections to reduce noise, in collaboration with detection engineering.
• Serve as senior incident responder, coordinating response and post-incident analysis.
• Conduct proactive threat-hunting and translate findings into new detections and controls.
• Develop playbooks and tooling to automate triage/investigation; mentor analysts.

Skills

Threat detection & IR

Cloud security

SIEM & log analysis

Python scripting

Tools

SIEM platforms

Detection engineering

Job description

Role overview

This senior individual-contributor role serves as the technical authority for detecting, triaging, investigating, and responding to security threats. The position owns the most complex and high-severity cases while strengthening the detections, playbooks, and processes the wider team depends on. It also bridges day-to-day security operations and the engineering work that makes them better.

Responsibilities

• Lead triage and investigation of complex, high-severity security alerts and incidents spanning cloud, endpoint, identity, and application telemetry.
• Tune, write, and validate detections to lift signal and reduce noise, partnering closely with detection engineering.
• Act as senior incident responder: drive investigations, coordinate response activities, and produce clear post-incident analyses.
• Run proactive threat-hunting exercises and convert findings into new detections and preventative controls.
• Build and maintain investigation and response playbooks, and raise the team's overall analytical rigor.
• Develop automation and tooling that reduces manual toil across triage and investigation workflows, and mentor other analysts.

Requirements

• Typically 8+ years of experience in security operations, incident response, threat detection, or a comparable analytical security role.
• Deep hands-on experience investigating threats across cloud, endpoint, identity, and network telemetry.
• Strong command of SIEM and detection platforms, log analysis techniques, and query languages.
• Proven experience writing and tuning detections and leading end-to-end incident investigations.
• Scripting or automation ability, ideally in Python or a similar language.
• Sharp analytical judgment paired with clear written communication for incident documentation.

Nice to have

• Detection engineering background and familiarity with detection-as-code practices.
• Experience in threat hunting and operationalizing threat intelligence.
• Working knowledge of cloud-provider security tooling and digital forensics.
• Industry certifications such as GCIA or GCIH.

Benefits and work setup

• Listed compensation of $220,000 for this Staff-level role.
• Senior individual-contributor track emphasizing team-wide impact on detections, playbooks, and analyst development.